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(54) Limited printing of electronically transmitted information 



(57) Limited printing of a source document (11) is 
performed. The source document (11) is encrypted to 
produce an encrypted document (15). The encrypted 
document (15) is combined with program objects (16) 
to form a limited print document (18). The limited print 



document (1 8) is received by a user. Upon the user ex- 
ecuting the limited print document (1 8), the program ob- 
jects (1 6) are run. The program objects (1 6) oversee de- 
cryption of the encrypted document (1 5) and printing the 
source document (11) on a printer (41). 
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Description 

BACKGROUND 

[0001] The present invention concerns data transac- 
tions made over networking systems and pertains par- 
ticularly to the limited printing of electronically transmit- 
ted information. 

[0002] Electronic transfer of information has greatly 
increased the simplicity and convenience of information 
distribution. While in many instances this is a great ben- 
efit, it can also introduce difficulties. 
[0003] For example, sometimes it is desired to limit 
the electronic dissemination of certain information. 
However, once the information is made available in elec- 
tronic form, it is very difficult to prevent further distribu- 
tion. 

[0004] Likewise, delivery of information via the Inter- 
net often is inadequately protected from unlicensed cop- 
ying. For instance, if an architect wishes to deliver a set 
of plans to a customer via an Internet connection, the 
architect may wish that only paid-for copies of the plans 
are made. Furthermore, the architect may wish for some 
protection against reproduction of the plans in an elec- 
tronic format, e.g., prevention of a recipient from posting 
the plans on a web site. Likewise, when research data 
is purchased, the provider of the information may wish 
to provide that the research data is delivered to the re- 
cipient with the correct number of copies and without the 
ability to re-circulate the data via electronic means. 
[0005] It would be advantageous, therefore, to allow 
information to be distributed electronically, yet to have 
some limitations that prevent additional electronic dis- 
tribution. 

SUMMARY OF THE INVENTION 

[0006] In accordance with the preferred embodiment 
of the present invention, limited printing of a source doc- 
ument is performed. The source document is encrypted 
to produce an encrypted document. The encrypted doc- 
ument is combined with program objects to form a lim- 
ited print document. The limited print document is re- 
ceived by a user. Upon the user executing the limited 
print document, the program objects are run. The pro- 
gram objects oversee decryption of the encrypted doc- 
ument and printing the source document on a printer. 
[0007] In one preferred embodiment, an installation 
identifier is used to confirm permission to print the 
source document. For example, the installation identif ier 
is forwarded through the internet to a document provid- 
er. The document provider checks the installation iden- 
tifier against information stored in a database. The doc- 
ument provider forwards to the program objects an in- 
dication as to whether permission is confirmed. 
[0008] Alternatively, the installation identifier is com- 
pared with identification information pertaining to a com- 
puting system on which the programming object is run- 



ning to determine whether a computing system on which 
the program objects are running is authorized to perform 
a print. For protection, the installation identifier can be 
encrypted until it is used. 
5 [0009] Upon completion of printing, the limited print 
document, the installation identifier and/or a decryption 
key used to decrypt the encrypted document are de- 
stroyed. 

[0010] The user purchases rights to print the source 
10 document. In various embodiments of the present in- 
vention, the limited print document and/or a decryption 
key are not forwarded to the user until the purchase has 
been completed. 

[001 1 ] In one embodiment of the invention, upon com- 
15 pletion of printing, the user is asked to confirm printing 
was performed. Upon receipt of confirmation from the 
user, the limited print document is destroyed. 
[0012] In another embodiment of the invention, the 
source document is printed in sections. Upon comple- 
te? tion of printing, each section is destroyed. Before de- 
struction of a section, a user can be requested to confirm 
printing the section was completed. 
[0013] The present invention provides for generation 
of a limited number of copies of a source document and 
25 provides protection against misuse of the electronic 
form of a source document. 

BRIEF DESCRIPTION OF THE DRAWINGS 

30 [0014] 

Figure 1 is a simplified block diagram that illustrates 
the construction of a limited print document in ac- 
cordance with a preferred embodiment of the 

35 present invention. 

Figure 2 is a simplified block diagram that illustrates 
the download and installation of a limited print doc- 
ument in accordance with a preferred embodiment 
of the present invention. 

40 Figure 3 is a simplified block diagram that illustrates 
the purchase of printing rights of a limited print doc- 
ument in accordance with a preferred embodiment 
of the present invention. 

Figure 4 is a simplified block diagram that illustrates 
45 the beginning of the process to print a limited print 
document in accordance with a preferred embodi- 
ment of the present invention. 
Figure 5 is a simplified block diagram that illustrates 
the completion of the process to print a limited print 
50 document in accordance with a preferred embodi- 
ment of the present invention. 

DESCRIPTION OF THE PREFERRED EMBODIMENT 

55 [0015] Limited print documents are electronically en- 
capsulated documents that can be printed only a limited 
number of times (e.g., once). Limited print documents 
allow for the delivery of valuable documents electroni- 
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cally and at the same time prevent the recipient (user) 
from easily printing out multiple copies of the document 
or redistributing the electronic form of the document to 
others. Limited print documents can be used to deliver 
documents for payment or for delivery of documents 
based on digital signature. 

[0016] A limited print document is encapsulated in a 
program file. On a personal computer (PC), the limited 
print document is delivered, for example, as an 
executable .exe file. The source document inside the 
limited print document is encrypted so that the source 
document can not be easily extracted by taking apart 
the limited printed document. 

[0017] Figure 1 is a simplified block diagram that illus- 
trates the construction of a limited print document 1 8. 
The process starts with a source document 11 . For ex- 
ample, source document 11 is authored with a standard 
document preparing tool (e.g. Microsoft Word available 
from Microsoft Corporation, Adobe Photoshop available 
from Adobe Systems, Inc., Quark Express or another of 
many available applications) and stored, for example, 
in a common document transfer format such as Adobe 
Portable Document Format (PDF), developed by Adobe 
Systems, Inc. Alternatively, source document 11 may be 
stored in any format which is printable. 
[0018] Source document 11 is encrypted using an en- 
cryption tool 1 4. For example, encryption tool 1 4 utilizes 
the Data Encryption Standard (DES) or the International 
Data Encryption Algorithm (IDEA). In a database 12, the 
association of an encryption key 13 used for the encryp- 
tion and source document 11 is stored. Encryption tool 
14 produces an encrypted document 15. 
[0019] A program linker/loader 17 links encrypted 
document 1 5 with program objects 1 6 to produce limited 
print document 18. Program objects 16 are, for example, 
■\obj" files that perform the installation, decryption, and 
printing of limited print document 1 8 on an end user sys- 
tem. Program linker/loader 17 is, for example, a stand- 
ard linker/loader such as that available in Microsoft Vis- 
ual C++ 6.0. Limited print document 1 8 thus contains 
the program objects 1 6 and the contents of encrypted 
document 15. 

[0020] Figure 2 is a simplified block diagram that illus- 
trates the download and installation of limited print doc- 
ument 1 8 by a user (buyer, document consumer). The 
user browses to the document provider's web site and 
selects a document for download. For example, the user 
selects limited print document 18 from provider data- 
base 21 . The user downloads limited print document 1 8 
using norma! mechanisms within a web browser 29. In- 
stallation software within limited print document 1 8 is run 
in order to record particulars 27 of the document down- 
load. Particulars 27 include system name, file name, 
date and time, and so on. The provider performs a 
record installation 24 of particulars 27 in a database 23. 
A unique installation identifier 26 is recorded in data- 
base 23 along with particulars 27. Unique installation 
identifier 26 is also sent to the user where installation 



identifier 26 is sorted along with limited print document 
1 8 in a user storage area 30. 

[0021] The installation software can be run manually 
by the user, or can execute automatically upon down- 

5 load via Multipurpose Internet Mail Extensions (MIME) 
types in web browser 29. Alternatively, running of the 
installation software can be deferred until just before 
printing rights are purchased. Automating the installa- 
tion with the use of MIME types requires web browser 

10 29 to be configured to run pre-installed software when 
it encounters a limited print document identified by a 
new "limited print document" MIME type. 
[0022] Figure 3 is a simplified block diagram that illus- 
trates the purchase of printing rights of limited print doc- 

15 ument 1 8. During purchase, the user supplies to the pro- 
vider unique installation identifier 26 along with, for ex- 
ample, credit card information 36, which provider can 
verify, for example, using a financial institution 35, ac- 
cessed via the internet 22. 

20 [0023] Through a purchase decryption key process 
34, installation identifier match 32 is performed to con- 
firm a corresponding installation identifier is stored in da- 
tabase 31 . Once payment has been confirmed and a 
match has been made, a decryption key 33 is forwarded 

25 through internet 22 to the user and stored in storage 30 
along with install identification 26 and limited print doc- 
ument 18. 

[0024] Figure 4 is a simplified block diagram that illus- 
trates the beginning of the process to print limited print 

30 document 18. Limited print document 18 contains pro- 
gram objects (e.g., .obj files) which perform printing 
functions. When a user executes limited print document 
1 8, limited print client 49 (a running version of the pro- 
gram objects) from within limited print document is run. 

35 Before performing any printing, limited print client 49 
checks the validity of the installation using unique instal- 
lation identification 26. This is done, for example, by 
sending unique installation identification 26 through the 
internet 22 to a validate print request process 41 within 

40 the provider domain. Installation identifier match 42 is 
performed to confirm a corresponding installation iden- 
tifier is stored in database 31 . Depending upon the suc- 
cess of the match, a return message 43 indicating "Go" 
or "No Go" indicates whether the print may be per- 

45 formed. When the "Go" message has been received, 
limited print client 49 uses decryption key 33 to decrypt 
the data contents of limited print document 1 8 to recover 
source document 11 . Limited print client 49 then prints 
source document 11 on a printer 41 that is part of or 

so attached to the user computer system. 

[0025] Figure 5 is a simplified block diagram that illus- 
trates the completion of the process to print limited print 
document 1 8 . After printing source document 1 1 , limited 
print client 49 waits for the user to acknowledge that a 

55 good copy of source document 11 was printed. The user 
gives the acknowledgement through use of a dialog win- 
dow or other familiar user interface mechanism on the 
user computer system. Alternatively, the acknowledge- 
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ment may be generated by limited print client 49 without 
input from the user. 

[0026] The acknowledgement that a good copy of 
document 11 was printed is forwarded to a record print 
action process 41 on the provider's system. Installation 
identifier match 42 is performed to locate a correspond- 
ing installation identifier stored in database 31. An up- 
date printed copy count process 43 is performed to in- 
dicate within database 31 that the print has been per- 
formed. 

[0027] Once the user accepts the printed version of 
source document 1 1 (or alternatively, limited print client 
49 determines on its own that source document 11 has 
been satisfactorily printed), limited print client 49 takes 
action to insure that another print cannot happen. For 
example, destroy document process 33 destroys limited 
print document 1 8 and decryption key 33. Alternatively, 
depending on the operating system run by the user's 
computer system, destroy document process 33 can 
damage any combination of limited print document file 
18, installation identification 26 or decryption key 33. 
[0028] If source document 11 is more than a prede- 
termined number of pages (e.g., greater than 20 pages), 
then verification of the printing of source document 1 1 
is done in smaller sections, such as chapters. As the 
user accepts the printed output of each section, limited 
print client 49 damages the accepted section so that it 
cannot be printed again. 

[0029] If the printing of a section fails, then that sec- 
tion is reprinted. The numbers of reprints of a section is 
limited. Once the user accepts all the sections, limited 
print client 49 deletes limited print document 1 8 and de- 
cryption key 33. 

[0030] While the above describes one embodiment of 
the invention, the invention may be embodied in other 
specific forms without departing from the spirit or essen- 
tial characteristics thereof. 

[0031] For example, in the above-described embodi- 
ment, a working internet connection at the time of print- 
ing is assumed. Such an embodiment provides for 
heightened security and allows information on the print 
to be easily tracked by the provider. 
[0032] In an alternative embodiment, for example, a 
user downloads limited print document 18 and receives 
an installation identification that has been encrypted. 
Upon purchasing decryption key 33 the user can print 
while offline. Limited print client 49 uses decryption key 
33 to decrypt the installation identification information 
and compares that with the current user system. A 
match validates the right to print. 
[0033] In another alternative embodiment, limited 
print document 1 8 is not downloaded from the provider's 
web site until after the purchase of printing rights of lim- 
ited print document 1 8. Once the printing rights of limited 
print document 1 8 are purchased, both limited print doc- 
ument 18 and decryption key 33 are downloaded. 
[0034] When run, limited print client 49 decrypts the 
data portion of limited print document 18 to extract 



source document 18 and streams source document 18 
to printer 41 . Once successful completion of the printing 
of source document 18 is confirmed (either by monitor- 
ing done by limited print client 49 or feedback from the 
5 user), limited print client 49 sends an acknowledgement 
backto the provider and destroys limited print document 
18 and decryption key 33. Any error in printing is han- 
dled by further interaction between the provider and the 
user, 

10 [0035] In yet another embodiment of the present in- 
vention, limited encryption key 33 is transferred to stor- 
age 30 but limited print document 1 8 is not transferred 
to storage 30. Rather, upon confirmation of payment, the 
user can utilize encryption key 33 to have source docu- 

15 ment11 decrypted and transferred directly from the pro- 
vider web site to printer 41 via a secure Hypertext Trans- 
fer Protocol (http) connection, Secure Sockets Layer 
(SSL) connection or an email client acting upon the be- 
half of printer 41 . Upon successful printing, the provider 

20 is notified. Unsuccessful printing requires further inter- 
action between the provider and user. For example, in 
this case, encryption key 33 allows the user to access 
source document 11 only once. When multiple printed 
copies are required, additional encryption keys must be 

25 purchased. 

[0036] The foregoing discussion discloses and de- 
scribes merely exemplary methods and embodiments 
of the present invention. As will be understood by those 
familiar with the art, the invention may be embodied in 

30 other specific forms without departing from the spirit or 
essential characteristics thereof. Accordingly, the dis- 
closure of the present invention is intended to be illus- 
trative, but not limiting, of the scope of the invention, 
which is set forth in the following claims. 

35 
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1. A method for providing for limited printing of a 
source document (11), the method comprising the 
following steps: 

(a) encrypting the source document (11) to pro- 
duce an encrypted document (15); 

(b) combining the encrypted document (15) 
with program objects (1 6) to form a limited print 
document (18); 

(c) receiving the limited print document (18) by 
a user; and, 

(d) running the program objects (16) upon the 
user executing the limited print document (18), 
the program objects (1 6) overseeing decryption 
of the encrypted document (15) and printing the 
source document (11) on a printer (41). 

2. A method as in claim 1 wherein in step (d) upon run- 
ning the program objects (16), the following sub- 
steps are performed: 
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3. 



(d.1) using an installation identifier (26) to con- 
firm permission to print the source document 
(11), including the following substeps: 

forwarding the installation identifier (26) 
through the internet (22) to a document 
provider, 

checking the installation identifier (26) by 
the document provider against information 
stored in a database (31), and 
forwarding by the document provider to the 
program objects (16) an indication as to 
whether permission is confirmed; and, 

(d.2) upon confirmation of permission to print 
the source document (11), performing the fol- 
lowing substeps: 

decrypting the encrypted document (15), 
printing the source document (11) on the 
printer (41), and upon completion of print- 
ing, destroying the limited print document 
(18). 

A method as in claim 1 wherein in step (d) upon run- 
ning the program objects (16), the following sub- 
steps are performed: 

(d.1) using an installation identifier (26) to con- 
firm permission to print the source document 
(11), including the following substep: 

comparing the installation identifier (26) 
with identification information pertaining to a 
computing system on which the programming 
object is running to determine whether a com- 
puting system on which the program objects 
(1 6) are running is authorized to perform a print; 
and, 

(d.2) upon confirmation of permission to print 
the source document (11), printing the source 
document (11) on the printer (41). 
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program objects (1 6) which when run on a com- 
puting system oversee decryption of the en- 
crypted document (15) and printing the source 
document (11) on a printer (41). 

A limited print document (1 8) as in claim 6 wherein 
the program objects (16) use an installation identi- 
fier (26) to confirm permission to print the source 
document (11), and upon confirmation of permis- 
sion to print the source document (11), decrypting 
the encrypted document (15), printing the source 
document (11) on the printer (41), and upon com- 
pletion of printing the program objects (16), destroy- 
ing the limited print document (18). 

A limited print document (1 8) as in claim 6 wherein 
the program objects (16) use an installation identi- 
fier (26) to confirm permission to print the source 
document (11), forwarding the installation identifier 
(26) through the internet (22) to a document provid- 
er to determine whether there exists permission to 
print the source document (11) on the printer (41). 

A limited print document (1 8) as in claim 6 wherein 
the program objects (16)use an installation identifi- 
er (26) to confirm permission to print the source doc- 
ument (11) by comparing the installation identifier 
(26) with identification information pertaining to a 
computing system on which the programming ob- 
ject is running to determine whether a computing 
system on which the program objects (16) are run- 
ning is authorized to perform a print of the source 
document (11). 

A limited print document (1 8) as in claim 6 wherein 
the program objects (1 6) use a decryption key to be 
used for decrypting the encrypted document (15), 
the decryption key being received in response to 
purchasing of rights to print the source document 
(11). 



A method as in claim 1 wherein in step (c) includes 
the following substeps: 

(c.1) purchasing, by the user, rights to print 45 
the source document (11). 



A method as in claim 1 wherein in step (c)includes 
the following substeps: 

(c.1) receiving, by the user, a decryption key 
to be used for decrypting the encrypted document 
(15) in response to the user purchasing rights to 
print the source document (11). 



50 



6. A limited print document (1 8) comprising: 

an encrypted document (1 5) that when decrypt- 
ed is a source document (11); and, 
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